CVE-2022-20253 — Improper Handling of Exceptional Conditions in Google Android

CWE-755 — Improper Handling of Exceptional Conditions2 documents2 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 66.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedAug 12
Latest updateAug 13

Description

In Bluetooth, there is a possible cleanup failure due to an uncaught exception. This could lead to remote denial of service in Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545125

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5google/androidAndroid-13
▶NVDgoogle/android13.0

🔴Vulnerability Details

1
GHSA
GHSA-rr8c-4q3g-xh5r: In Bluetooth, there is a possible cleanup failure due to an uncaught exception↗2022-08-13
▶